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Abstract. For a recent student conference, the authors devel- 
oped a day-long design problem and competition suitable for en- 
gineering, mathematics and science undergraduates. The compe- 
tition included a cryptography problem, for which a workshop was 
run during the conference. This paper describes the competition, 
focusing on the cryptography problem and the workshop. Notes 
from the workshop and code for the computer programs are made 
available via the Internet. The results of a personal self-evaluation 
(PSE) are described. 



1. Introduction 

On 27 March 2004, students from across the Midwest United States 
gathered at the Rose-Hulman Institute of Technology for the 2004 MU- 
PEC (Midwest Undergraduate Private Engineering Colleges) Confer- 
ence. This is an annual conference sponsored by the MUPEC group, 
comprising the institutions listed in Table 1. A different institution 
hosts the event each year. Participants presented papers or posters on 
projects in mathematics, computer, and engineering disciplines, and 
also participated in a multidisciplinary design competition. 

This paper will focus on the design competition developed by the au- 
thors, and especially the cryptography problem which students had to 
solve. The challenge for the conference organizers is to create a design 
problem suitable for students from a variety of science, mathematics 
and engineering disciplines. Our goal in designing the competition was 
to create a day-long design problem suitable for undergraduates in en- 
gineering, mathematics and science. 



Key words and phrases, teaching cryptography, cryptography and engineering. 
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Table 1. MUPEC Member Institutions 



Cedarville University 

Indiana Institute of Technology 

Kettering University 

Lawrence Technological University 

Milwaukee School of Engineering 

Ohio Northern University 

Rose-Hulman Institute of Technology 

St. Louis University 

Tri-State University 

University of Evansville 

Valparaiso University 



2. Underwater Hacker Missile Wars 

The design competition was titled "Underwater Hacker Missile Wars" . 
The idea was to design a model rocket which could be fired from under- 
water and travel through the longest possible column of water. To com- 
plicate matters, students had to solve a cryptography problem in order 
to fire the rocket. The design competition involved skills in engineer- 
ing design and analysis as well as skills in mathematics and computer 
science/software engineering. Details on the rocket design portion of 
the competition may be found in [4]. 

The day of the conference, the thirteen student attendees were as- 
signed to design competition teams of either three or four members 
using an automated team-assignment software package recently devel- 
oped at Rose-Hulman [1]. Team assignment was based on each team 
having the broad mixture of multidisciplinary skills required to suc- 
cessfully compete and having students work with peers from other in- 
stitutions. 

Activities related to the design competition were divided into three 
broad groups: the rocket design, a cryptography workshop, and the 
contest itself. Teams started planning the design of their rockets at 
10:00 a.m. Each team designated one student to be their "hacker". 
While most of the students continued working on the problem until 
noon, from 11:00 until noon the hackers (and optionally other mem- 
bers of the teams) attended a workshop on cryptography conducted 
by Joshua Holden and Scott Dial, a computer science major at Rose- 
Hulman. (Several faculty members attending the conference also par- 
ticipated.) Preparation for the contest resumed after lunch, at 1:00 
p.m. From then until approximately 4:00 p.m., students concurrently 
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Table 2. Conference Itinerary 



Time 


Activity 


8:00-9:00 


Registration. Coffee, juice, muffins, and fruit. Set up 
posters. Last-minute team surveys. 


9:00-9:50 


Overview of the day's activities. PSE survey. Intro- 
duction to the design competition. Team assignments 
and introduce one another. 


9:50-10:00 


Break. 


10:00-12:00 


Teams brainstorm, develop a strategy and begin work 
on the design problem. Determine who on the team 
will be the code-breaker. At 10:50, code-breakers 
leave for workshop; others continue work. 


11:00-12:00 


Code-breaker workshop. 


12:00-12:50 


Lunch. 


1:00-3:30 


Oral and poster presentations (concurrent with con- 
tinuing design) at designated times. 


Design continues (concurrent with presentations), 
complete nose-cones. Code-breakers practice. 


3:00-4:00 


Nose-cones are due for oven-firing at 3:00, returned at 
3:30. Snacks provided. Paint your nose-cones! All de- 
sign and analysis documentation is finalized for judg- 
ing. 


4:00-5:00 


Competition. Underwater Hacker Missile Wars! 


5:00-5:30 


PSE survey. Awards. 



worked on their rocket designs, practiced breaking more of the cipher- 
texts programmed into the software, and presented their papers and 
posters to the judges. (The design work was also done in a computer- 
equipped classroom.) The contest itself began at approximately 4:00. 
The conference schedule is given in Table 2. (More details are available 
from the web sites [3] and [2], or in [4].) 

3. The Cryptography Workshop 

The purpose of the workshop was to familiarize the students both 
with the ciphers they were going to be breaking and the software they 
were going to be using to assist them. The workshop introduced three 
types of ciphers: additive ciphers (a.k.a shift ciphers or general Cae- 
sar ciphers), affine ciphers, and two-by-two Hill ciphers (a.k.a. matrix 
ciphers). For each of the three types of cipher we took the students 
through a similar routine. First, we gave a brief explanation and an 
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example. Then we had the students encipher a given message by hand 
using a given key. To check their answer, we showed them how to de- 
cipher the message using custom software, as described below. (The 
workshop was held in a computer-equipped classroom.) After that, we 
talked about how to break the cipher using frequency distributions. We 
showed them how to use the software to determine and test a probable 
key for the cipher. Finally, we let the students practice breaking a set 
of sample ciphers programmed into the software. Slides from the work- 
shop are available on the web at [2], under "Competition Materials". 

The software was written by Scott for the workshop and the com- 
petition. It was written in Java and distributed as a web-based ap- 
plet. There were three functions for each cipher: construct a letter 
frequency distribution (or, in the case of the Hill cipher, a digraph fre- 
quency distribution), recover a probable key based on a (very small) 
set of ciphertext-plaintext pairs, and decipher the message based on 
the probable key. 

The codebreaking functions for the additive and affine ciphers, which 
are letter substitution ciphers, were based on the letter frequency method 
In this method, the codebreaker prepares a "letter frequency distribu- 
tion" showing how often each ciphertext letter appears in the text. 
This is then compared against the known average frequency of letters 
in English plaintext; "e" is the most common, "t" is next, and so on. 
In the case of the additive cipher the key may be recovered from the 
knowledge of a single plaintext-ciphertext pair: the key consists of the 
numerical value of the ciphertext letter minus the value of the cor- 
responding plaintext letter, modulo 26. Thus if the codebreaker can 
correctly guess the ciphertext letter corresponding to "e" , he or she can 
obtain the key and decipher the message. 

For the affine cipher, the numerical value of the plaintext letter is 
multiplied by the first key number and added to the second key num- 
ber, modulo 26, to obtain the numerical value of the ciphertext letter. 
Thus the key can be recovered from the knowledge of two plaintext- 
ciphertext pairs, which sets up a system of two equations in two un- 
knowns which the codebreaker can (hopefully) solve. For example, if 
the codebreaker can correctly guess, from the letter frequency distri- 
bution, the ciphertext letters corresponding to "e" and "t" , he or she 
can obtain the key. 

The Hill cipher is slightly different because it is a block substitu- 
tion cipher. In the two-by-two case used in the workshop, each pair of 
consecutive plaintext numbers is multiplied by the key matrix modulo 
26 to obtain a pair of ciphertext numbers. Therefore recovering the 
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key requires the knowledge of two different plaintext-ciphertext corre- 
spondences, each consisting of a plaintext pair and the corresponding 
ciphertext pair. In this case the codebreaker prepares a "digraph fre- 
quency distribution" showing how often each possible pair of ciphertext 
letters appears consecutively in the text. This is then compared against 
the average frequency of letter pairs in English plaintext. This is not 
as well known as for letter frequencies, but it has been found that "th" 
is the most common letter pair, followed by "he", and so on. If the 
codebreaker now successfully guesses the ciphertext pairs correspond- 
ing to "th" and "he" , he or she can solve two matrix equations in two 
unknowns and once again obtain the key. 

The software was designed to aid this process as follows: the user 
entered a ciphertext or selected one out of a sample set of ciphertexts. 
Then he or she used the software to create either a letter frequency or 
digraph frequency distribution. The user then determined a probable 
key as follows: for the case of an additive cipher, the user entered a 
guess for the ciphertext equivalent of plaintext "e" ; for an affine cipher 
guesses for both "e" and "t" were entered; and for the two-by-two Hill 
cipher guesses for the pairs "th" and "he" were entered. The "attack" 
function of the software solved the appropriate equations and returned 
the corresponding key, or a message that no such key was possible. 
(The equations were unsolvable.) If a key was returned, the user went 
on to the deciphering function and attempted to decipher the messages. 
The students were made aware that all of the plaintext messages used 
in the contest were recognizable (if not necessarily meaningful) English 
sentences, so that it was immediately apparent if the key was correct. 
The software, including sample ciphertexts, is available at [2], under 
"Competition and Software" , and screen shots are shown in Figures 1 
and 2. Students were told that ciphertexts 1-10 were encrypted with 
an additive cipher, ciphertexts 11-20 were encrypted with an affine 
cipher, and ciphertexts 21-30 were encrypted with a Hill cipher. 

Students were directed to pay special attention to the form of the 
decrypted sample messages, which were constructed in exactly the same 
manner as the plaintext of the messages used in the actual competition. 
Each message started with a four digit PIN (spelled out in words), 
which was the only part of the message that the students needed to 
know in the actual competition. The rest of the message consisted of 
several meaningless (but grammatically correct) sentences which were 
chosen at random by a computer program from a list. The list was 
constructed to try to produce a large number of "e"s, "t"s, "th"s, and 
"he"s in order to make the frequency distribution attack feasible with a 
reasonably small number of guesses. However, this was not completely 
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O O Q UWHMW Software 

B*< M 1 13 | [a6| | C J [ + | R http://mvw.rosa-hulman.erJu/~holden/MUPEC/Underwater.html - <V 



CP Address Bock- Rosa RH Math TSC Library Registrar Weather TV Listings Hunger Site Gl 

The Underwater Hacker Missle Wars Software 

By Scott Dial, CS Major, Rose-Hulman Institute of Technology 



Input: 



CRWE1C QJCRW WOSDF OHTCO JCJWAJ WFACL WICQG EIOSR CJWFD KJWUF CHFDO [JFKXF FDOUO 

UFDWU IGWDC RIMDO ftDUAD QPWJF MJCFW ERLRW BWJHO ROUDW LFDOTI OUFDW l^MRO RSCRF 

DKESK CHEIQ EJOQU FOKilV EJRCB FDWHV EJHOU FB1IHV EJNCH FDWAV EJKtfE IECEF FTIRFO 

CRFCF DWGER PWDOR LFDWA QJFEO R 



Output: 



A-7 B-l C-L7 D-20 E-14 F-2S G-3 H-9 1-6 
J.14 K»0 L=5 M=3 m»4 Cml7 P»2 Q«7 R-17 
5-4 T-0 U-13 V-4 H-27 H'L T-l Z-0 




Letter Frequency 
O Additive Decrypt 

* » -.m v» a " 

C Affine decrypt 
O Hill Decrypt 



Key #2: 



Key #3: 



; Digraph Frequency 

L li II II" 
O Additive Attack 



C Affine Attack 

ft ».'~US°H 
C Hill Attack 



^ Perform Operation i 



Figure 1. Workshop software performing a letter fre- 
quency analysis 

successful for the case of the Hill cipher, and some of the sample texts 
required quite a few guesses. 

4. The Contest 

One "round" was conducted for each team; for each round an "of- 
fensive" and a "defensive" team was picked such that each team got 
exactly one offensive and one defensive opportunity. The offensive 
team's rocket was loaded into the underwater missile-launching tube. 
The hackers from the offensive and defensive teams were each seated 
at a laptop computer with the workshop software installed and a set 
of ciphertexts loaded which they had not seen before. All ciphertexts 
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n.Q 'Q UWHMW Software 

B*< M 1 13 | [a6| | C J [ + | R http://mvw.rosa-hulman.erJu/~holden/MUPEC/Underwater.html - <V 

CP Address Bock"* Rose RH Math TSC Library Registrar Weather TV Listings Hunger Site Gl 

The Underwater Hacker Missle Wars Software 

By Scott Dial, CS Major, Rose-Hulman Institute of Technology 



Input: 



CRWE1C QJCRW WOSDF OtTICQ JUWAJ WFACL WICOG EIQSR CJWFD NJWUF CHFEXJ UFTCXF FDOL/O 

UFDWIT IGWDC RIMDO ADUAO O.PWJF MJCFW ERLRW BWJHO ROUDW LFDOU OUFDW LEMRO RSCE-1F 

DKESW CH£Y£ EJOOU FDWAV EJRCti FDWHV EjNOU FDWtiV EJNCH FDffAV EJKNE IECEF FKRFO 

CRFCf DWGER PWDOR LFDWA 1JJFEO R 



Output: 



(JWEFO URGNE EIGEJT ISYOU RSECR ETCGD ETOUM AYIGH ORETH EREST OFTHI STEXT TEIISI 

STE1ES YMF HQ HYtfHT C BSC EI UBERT WROTE ANDHE: VERFI NISEIE DTHIS ISTEfE DftWWI WGOFT 

HEAGE OFAgU ARICJ5 TH.E-CL ARWOF TESEFL ARPIS TE1EF1 ARFOF THECL ARNFA YNOAT TENT I 

ONTOT ETEMAN BEHIW DTHEC URTAI N 




Letter Frequency 

V i l r ; hj-<m 
O Additive Decrypt 
A. f I *1 I"" H " 
£ Affine Decrypt 



Key #2: 4 Keys?: 




; Digraph Frequency 

L li II II" 
O Additive Attack 



C Affine Attack 

ft ».'~usan 

C Hill Attack 



^ Perform Operation ) 



Figure 2. Workshop software deciphering a message 



used in the actual contest involved affine ciphers, and this was made 
known to the contestants at the start of the contest. Also loaded onto 
the computers was control software written by Laurence Merkle which 
took a round number and a four digit PIN and checked the PIN to see 
if it corresponded to the ciphertext for that round. 

If the PIN was correct, the software was programmed to send a 
signal to a switching module designed and built by Tina Hudson. The 
switching module was built to determine which of the two laptops had 
sent the signal first. The intended plan for the switching module was 
that if the offensive team sent the signal first then the module would 
produce a "launch" result which would connect a six-volt battery to the 
ignitor of the model rocket, causing the rocket to launch. If the defense 
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Figure 3. Competition schematic 



succeeded first the module would produce a "no-launch" result and the 
rocket would not launch. (Due to electrical issues this result was not 
conveyed directly to the rocket launcher during the actual competition; 
rather an indicator light indicated which team had succeeded first. The 
electrical issues have since been resolved, and a new launch board has 
been built and tested for future use.) 

In the actual execution, the round was started with an announcement 
of the round number and the simultaneous starting of a stopwatch for 
each team. The hackers then proceeded to enter the round number into 
the workshop software and get their ciphertext, which they attempted 
to break. (For fairness, both teams received the same problem.) When 
they had broken the text and obtained the four-digit number they 
entered the number into the control software, which determined if it 
was correct. Each team's stopwatch was stopped when the correct 
code number was recognized. Both of the measured times were used in 
scoring, so both hackers were directed to proceed until they had broken 
the cipher. The winner of the ciphertext competition was announced, 
and in either case the rocket was launched so that its performance 
could be used in the scoring. Figure 3 presents a schematic of the 
competition. 

Team scores for the competition as a whole were based on the per- 
formance of the rocket (65%), the accuracy of the team's prediction 
of the performance of the rocket (12%), the aesthetics of the painted 
nose-cones of the rockets (3%), and the code-breaking times for both 



UNDERWATER HACKER MISSILE WARS 



9 



the offensive opportunity (10%) and the defensive opportunity (10%). 
Timing scores were calculated using the time measured as a fraction 
of the maximum time measured for any team in any round. Another 
scoring possibility might take into account the "head-to-head" nature 
of the competition more directly. Also, the system we used did not ac- 
count for the possibility that some ciphertexts might be more difficult 
to decipher than others. 



5. Conclusions 

Our goal in designing the competition was to create a day-long de- 
sign problem suitable for undergraduates in engineering, mathematics 
and science disciplines. Surveys filled out by the students support this 
goal, both in general (see [4]) and in the cryptography part of the com- 
petition. Students were originally not very confident of their ability to 
break codes and ciphers and to use matrices to encipher messages, but 
they indicated that they gained confidence after attending the work- 
shop and practicing (or watching their teammates practice) these skills 
over the course of the day. However, the students indicated that they 
had lost confidence in their ability to encrypt messages using a sim- 
ple cipher. We hypothesize that students on average were perhaps not 
aware before the workshop of some of the complexities of what could be 
considered a "simple" cipher, and were thus overconfident. We think 
the surveys indicate that on average, some level of learning has occurred 
for a mixed group of students from different disciplines and different 
institutions. 

Quite a bit of time and effort went in to putting this competition 
together. We estimate that Prof. Holden put in about 30 hours of work 
on the design of the cryptography part of the competition and preparing 
the cryptography workshop. Prof. Hudson spent about 20 hours for 
the switching module. Prof. Layton put in about 80 hours of work on 
the design and testing of the launch-tube apparatus, coordinating the 
overall competition design, and organizing the conference. Prof. Merkle 
spent an estimated 50 hours on the control software. Erin Bender and 
Gerald Rea, mechanical engineering majors at Rose-Hulman, put in 
approximately 100 hours of work on the original analysis and simulation 
for the design as well as the building and testing and redesign of the 
physical apparatus. They were compensated for this as work-study 
employees. Scott Dial put in approximately 10 hours of work on the 
workshop software, for which he was compensated with extra credit in 
Prof. Holden's cryptography class. 
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However, much of this would effort would not have to be duplicated 
by someone putting on a similar competition. Complete plans and 
instructions for all aspects of the competition are or will be posted at [2] 
and we estimate that a person or team of people with the appropriate 
expertise could reproduce the competition in perhaps a quarter of the 
time we spent. 
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